User can log-in/log-out, basic profile view, csrf check